docs: update docs (#916)

* fix: re-run script

* test: fix noxfile
diff --git a/docs/dyn/secretmanager_v1beta1.projects.secrets.html b/docs/dyn/secretmanager_v1beta1.projects.secrets.html
index e66fb2f..66de141 100644
--- a/docs/dyn/secretmanager_v1beta1.projects.secrets.html
+++ b/docs/dyn/secretmanager_v1beta1.projects.secrets.html
@@ -161,44 +161,44 @@
     The object takes the form of:
 
 { # A Secret is a logical secret whose value and versions can
-    # be accessed.
-    # 
-    # A Secret is made up of zero or more SecretVersions that
-    # represent the secret data.
-  "name": "A String", # Output only. The resource name of the Secret in the format `projects/*/secrets/*`.
-  "replication": { # A policy that defines the replication configuration of data. # Required. Immutable. The replication policy of the secret data attached to the Secret.
+      # be accessed.
       # 
-      # The replication policy cannot be changed after the Secret has been created.
-    "userManaged": { # A replication policy that replicates the Secret payload into the # The Secret will only be replicated into the locations specified.
-        # locations specified in Secret.replication.user_managed.replicas
-      "replicas": [ # Required. The list of Replicas for this Secret.
-          #
-          # Cannot be empty.
-        { # Represents a Replica for this Secret.
-          "location": "A String", # The canonical IDs of the location to replicate data.
-              # For example: `"us-east1"`.
-        },
-      ],
+      # A Secret is made up of zero or more SecretVersions that
+      # represent the secret data.
+    "name": "A String", # Output only. The resource name of the Secret in the format `projects/*/secrets/*`.
+    "replication": { # A policy that defines the replication configuration of data. # Required. Immutable. The replication policy of the secret data attached to the Secret.
+        # 
+        # The replication policy cannot be changed after the Secret has been created.
+      "automatic": { # A replication policy that replicates the Secret payload without any # The Secret will automatically be replicated without any restrictions.
+          # restrictions.
+      },
+      "userManaged": { # A replication policy that replicates the Secret payload into the # The Secret will only be replicated into the locations specified.
+          # locations specified in Secret.replication.user_managed.replicas
+        "replicas": [ # Required. The list of Replicas for this Secret.
+            #
+            # Cannot be empty.
+          { # Represents a Replica for this Secret.
+            "location": "A String", # The canonical IDs of the location to replicate data.
+                # For example: `"us-east1"`.
+          },
+        ],
+      },
     },
-    "automatic": { # A replication policy that replicates the Secret payload without any # The Secret will automatically be replicated without any restrictions.
-        # restrictions.
+    "createTime": "A String", # Output only. The time at which the Secret was created.
+    "labels": { # The labels assigned to this Secret.
+        # 
+        # Label keys must be between 1 and 63 characters long, have a UTF-8 encoding
+        # of maximum 128 bytes, and must conform to the following PCRE regular
+        # expression: `\p{Ll}\p{Lo}{0,62}`
+        # 
+        # Label values must be between 0 and 63 characters long, have a UTF-8
+        # encoding of maximum 128 bytes, and must conform to the following PCRE
+        # regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`
+        # 
+        # No more than 64 labels can be assigned to a given resource.
+      "a_key": "A String",
     },
-  },
-  "createTime": "A String", # Output only. The time at which the Secret was created.
-  "labels": { # The labels assigned to this Secret.
-      # 
-      # Label keys must be between 1 and 63 characters long, have a UTF-8 encoding
-      # of maximum 128 bytes, and must conform to the following PCRE regular
-      # expression: `\p{Ll}\p{Lo}{0,62}`
-      # 
-      # Label values must be between 0 and 63 characters long, have a UTF-8
-      # encoding of maximum 128 bytes, and must conform to the following PCRE
-      # regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`
-      # 
-      # No more than 64 labels can be assigned to a given resource.
-    "a_key": "A String",
-  },
-}
+  }
 
   secretId: string, Required. This must be unique within the project.
 
@@ -214,44 +214,44 @@
   An object of the form:
 
     { # A Secret is a logical secret whose value and versions can
-      # be accessed.
-      #
-      # A Secret is made up of zero or more SecretVersions that
-      # represent the secret data.
-    "name": "A String", # Output only. The resource name of the Secret in the format `projects/*/secrets/*`.
-    "replication": { # A policy that defines the replication configuration of data. # Required. Immutable. The replication policy of the secret data attached to the Secret.
+        # be accessed.
         #
-        # The replication policy cannot be changed after the Secret has been created.
-      "userManaged": { # A replication policy that replicates the Secret payload into the # The Secret will only be replicated into the locations specified.
-          # locations specified in Secret.replication.user_managed.replicas
-        "replicas": [ # Required. The list of Replicas for this Secret.
-            #
-            # Cannot be empty.
-          { # Represents a Replica for this Secret.
-            "location": "A String", # The canonical IDs of the location to replicate data.
-                # For example: `"us-east1"`.
-          },
-        ],
+        # A Secret is made up of zero or more SecretVersions that
+        # represent the secret data.
+      "name": "A String", # Output only. The resource name of the Secret in the format `projects/*/secrets/*`.
+      "replication": { # A policy that defines the replication configuration of data. # Required. Immutable. The replication policy of the secret data attached to the Secret.
+          #
+          # The replication policy cannot be changed after the Secret has been created.
+        "automatic": { # A replication policy that replicates the Secret payload without any # The Secret will automatically be replicated without any restrictions.
+            # restrictions.
+        },
+        "userManaged": { # A replication policy that replicates the Secret payload into the # The Secret will only be replicated into the locations specified.
+            # locations specified in Secret.replication.user_managed.replicas
+          "replicas": [ # Required. The list of Replicas for this Secret.
+              #
+              # Cannot be empty.
+            { # Represents a Replica for this Secret.
+              "location": "A String", # The canonical IDs of the location to replicate data.
+                  # For example: `"us-east1"`.
+            },
+          ],
+        },
       },
-      "automatic": { # A replication policy that replicates the Secret payload without any # The Secret will automatically be replicated without any restrictions.
-          # restrictions.
+      "createTime": "A String", # Output only. The time at which the Secret was created.
+      "labels": { # The labels assigned to this Secret.
+          #
+          # Label keys must be between 1 and 63 characters long, have a UTF-8 encoding
+          # of maximum 128 bytes, and must conform to the following PCRE regular
+          # expression: `\p{Ll}\p{Lo}{0,62}`
+          #
+          # Label values must be between 0 and 63 characters long, have a UTF-8
+          # encoding of maximum 128 bytes, and must conform to the following PCRE
+          # regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`
+          #
+          # No more than 64 labels can be assigned to a given resource.
+        "a_key": "A String",
       },
-    },
-    "createTime": "A String", # Output only. The time at which the Secret was created.
-    "labels": { # The labels assigned to this Secret.
-        #
-        # Label keys must be between 1 and 63 characters long, have a UTF-8 encoding
-        # of maximum 128 bytes, and must conform to the following PCRE regular
-        # expression: `\p{Ll}\p{Lo}{0,62}`
-        #
-        # Label values must be between 0 and 63 characters long, have a UTF-8
-        # encoding of maximum 128 bytes, and must conform to the following PCRE
-        # regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`
-        #
-        # No more than 64 labels can be assigned to a given resource.
-      "a_key": "A String",
-    },
-  }</pre>
+    }</pre>
 </div>
 
 <div class="method">
@@ -296,44 +296,44 @@
   An object of the form:
 
     { # A Secret is a logical secret whose value and versions can
-      # be accessed.
-      #
-      # A Secret is made up of zero or more SecretVersions that
-      # represent the secret data.
-    &quot;name&quot;: &quot;A String&quot;, # Output only. The resource name of the Secret in the format `projects/*/secrets/*`.
-    &quot;replication&quot;: { # A policy that defines the replication configuration of data. # Required. Immutable. The replication policy of the secret data attached to the Secret.
+        # be accessed.
         #
-        # The replication policy cannot be changed after the Secret has been created.
-      &quot;userManaged&quot;: { # A replication policy that replicates the Secret payload into the # The Secret will only be replicated into the locations specified.
-          # locations specified in Secret.replication.user_managed.replicas
-        &quot;replicas&quot;: [ # Required. The list of Replicas for this Secret.
-            #
-            # Cannot be empty.
-          { # Represents a Replica for this Secret.
-            &quot;location&quot;: &quot;A String&quot;, # The canonical IDs of the location to replicate data.
-                # For example: `&quot;us-east1&quot;`.
-          },
-        ],
+        # A Secret is made up of zero or more SecretVersions that
+        # represent the secret data.
+      &quot;name&quot;: &quot;A String&quot;, # Output only. The resource name of the Secret in the format `projects/*/secrets/*`.
+      &quot;replication&quot;: { # A policy that defines the replication configuration of data. # Required. Immutable. The replication policy of the secret data attached to the Secret.
+          #
+          # The replication policy cannot be changed after the Secret has been created.
+        &quot;automatic&quot;: { # A replication policy that replicates the Secret payload without any # The Secret will automatically be replicated without any restrictions.
+            # restrictions.
+        },
+        &quot;userManaged&quot;: { # A replication policy that replicates the Secret payload into the # The Secret will only be replicated into the locations specified.
+            # locations specified in Secret.replication.user_managed.replicas
+          &quot;replicas&quot;: [ # Required. The list of Replicas for this Secret.
+              #
+              # Cannot be empty.
+            { # Represents a Replica for this Secret.
+              &quot;location&quot;: &quot;A String&quot;, # The canonical IDs of the location to replicate data.
+                  # For example: `&quot;us-east1&quot;`.
+            },
+          ],
+        },
       },
-      &quot;automatic&quot;: { # A replication policy that replicates the Secret payload without any # The Secret will automatically be replicated without any restrictions.
-          # restrictions.
+      &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time at which the Secret was created.
+      &quot;labels&quot;: { # The labels assigned to this Secret.
+          #
+          # Label keys must be between 1 and 63 characters long, have a UTF-8 encoding
+          # of maximum 128 bytes, and must conform to the following PCRE regular
+          # expression: `\p{Ll}\p{Lo}{0,62}`
+          #
+          # Label values must be between 0 and 63 characters long, have a UTF-8
+          # encoding of maximum 128 bytes, and must conform to the following PCRE
+          # regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`
+          #
+          # No more than 64 labels can be assigned to a given resource.
+        &quot;a_key&quot;: &quot;A String&quot;,
       },
-    },
-    &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time at which the Secret was created.
-    &quot;labels&quot;: { # The labels assigned to this Secret.
-        #
-        # Label keys must be between 1 and 63 characters long, have a UTF-8 encoding
-        # of maximum 128 bytes, and must conform to the following PCRE regular
-        # expression: `\p{Ll}\p{Lo}{0,62}`
-        #
-        # Label values must be between 0 and 63 characters long, have a UTF-8
-        # encoding of maximum 128 bytes, and must conform to the following PCRE
-        # regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`
-        #
-        # No more than 64 labels can be assigned to a given resource.
-      &quot;a_key&quot;: &quot;A String&quot;,
-    },
-  }</pre>
+    }</pre>
 </div>
 
 <div class="method">
@@ -431,18 +431,6 @@
       #
       # For a description of IAM and its features, see the
       # [IAM documentation](https://cloud.google.com/iam/docs/).
-    &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
-        # prevent simultaneous updates of a policy from overwriting each other.
-        # It is strongly suggested that systems make use of the `etag` in the
-        # read-modify-write cycle to perform policy updates in order to avoid race
-        # conditions: An `etag` is returned in the response to `getIamPolicy`, and
-        # systems are expected to put that etag in the request to `setIamPolicy` to
-        # ensure that their change will be applied to the same version of the policy.
-        #
-        # **Important:** If you use IAM Conditions, you must include the `etag` field
-        # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
-        # you to overwrite a version `3` policy with a version `1` policy, and all of
-        # the conditions in the version `3` policy are lost.
     &quot;version&quot;: 42, # Specifies the format of the policy.
         #
         # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
@@ -598,6 +586,8 @@
             # The exact variables and functions that may be referenced within an expression
             # are determined by the service that evaluates it. See the service
             # documentation for additional information.
+          &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
+              # syntax.
           &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
               # its purpose. This can be used e.g. in UIs which allow to enter the
               # expression.
@@ -605,8 +595,6 @@
               # reporting, e.g. a file name and a position in the file.
           &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
               # describes the expression, e.g. when hovered over it in a UI.
-          &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
-              # syntax.
         },
         &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
             # `members` can have the following values:
@@ -657,6 +645,18 @@
             # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
       },
     ],
+    &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
+        # prevent simultaneous updates of a policy from overwriting each other.
+        # It is strongly suggested that systems make use of the `etag` in the
+        # read-modify-write cycle to perform policy updates in order to avoid race
+        # conditions: An `etag` is returned in the response to `getIamPolicy`, and
+        # systems are expected to put that etag in the request to `setIamPolicy` to
+        # ensure that their change will be applied to the same version of the policy.
+        #
+        # **Important:** If you use IAM Conditions, you must include the `etag` field
+        # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
+        # you to overwrite a version `3` policy with a version `1` policy, and all of
+        # the conditions in the version `3` policy are lost.
   }</pre>
 </div>
 
@@ -684,44 +684,44 @@
     &quot;secrets&quot;: [ # The list of Secrets sorted in reverse by create_time (newest
         # first).
       { # A Secret is a logical secret whose value and versions can
-          # be accessed.
-          #
-          # A Secret is made up of zero or more SecretVersions that
-          # represent the secret data.
-        &quot;name&quot;: &quot;A String&quot;, # Output only. The resource name of the Secret in the format `projects/*/secrets/*`.
-        &quot;replication&quot;: { # A policy that defines the replication configuration of data. # Required. Immutable. The replication policy of the secret data attached to the Secret.
+            # be accessed.
             #
-            # The replication policy cannot be changed after the Secret has been created.
-          &quot;userManaged&quot;: { # A replication policy that replicates the Secret payload into the # The Secret will only be replicated into the locations specified.
-              # locations specified in Secret.replication.user_managed.replicas
-            &quot;replicas&quot;: [ # Required. The list of Replicas for this Secret.
-                #
-                # Cannot be empty.
-              { # Represents a Replica for this Secret.
-                &quot;location&quot;: &quot;A String&quot;, # The canonical IDs of the location to replicate data.
-                    # For example: `&quot;us-east1&quot;`.
-              },
-            ],
+            # A Secret is made up of zero or more SecretVersions that
+            # represent the secret data.
+          &quot;name&quot;: &quot;A String&quot;, # Output only. The resource name of the Secret in the format `projects/*/secrets/*`.
+          &quot;replication&quot;: { # A policy that defines the replication configuration of data. # Required. Immutable. The replication policy of the secret data attached to the Secret.
+              #
+              # The replication policy cannot be changed after the Secret has been created.
+            &quot;automatic&quot;: { # A replication policy that replicates the Secret payload without any # The Secret will automatically be replicated without any restrictions.
+                # restrictions.
+            },
+            &quot;userManaged&quot;: { # A replication policy that replicates the Secret payload into the # The Secret will only be replicated into the locations specified.
+                # locations specified in Secret.replication.user_managed.replicas
+              &quot;replicas&quot;: [ # Required. The list of Replicas for this Secret.
+                  #
+                  # Cannot be empty.
+                { # Represents a Replica for this Secret.
+                  &quot;location&quot;: &quot;A String&quot;, # The canonical IDs of the location to replicate data.
+                      # For example: `&quot;us-east1&quot;`.
+                },
+              ],
+            },
           },
-          &quot;automatic&quot;: { # A replication policy that replicates the Secret payload without any # The Secret will automatically be replicated without any restrictions.
-              # restrictions.
+          &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time at which the Secret was created.
+          &quot;labels&quot;: { # The labels assigned to this Secret.
+              #
+              # Label keys must be between 1 and 63 characters long, have a UTF-8 encoding
+              # of maximum 128 bytes, and must conform to the following PCRE regular
+              # expression: `\p{Ll}\p{Lo}{0,62}`
+              #
+              # Label values must be between 0 and 63 characters long, have a UTF-8
+              # encoding of maximum 128 bytes, and must conform to the following PCRE
+              # regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`
+              #
+              # No more than 64 labels can be assigned to a given resource.
+            &quot;a_key&quot;: &quot;A String&quot;,
           },
         },
-        &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time at which the Secret was created.
-        &quot;labels&quot;: { # The labels assigned to this Secret.
-            #
-            # Label keys must be between 1 and 63 characters long, have a UTF-8 encoding
-            # of maximum 128 bytes, and must conform to the following PCRE regular
-            # expression: `\p{Ll}\p{Lo}{0,62}`
-            #
-            # Label values must be between 0 and 63 characters long, have a UTF-8
-            # encoding of maximum 128 bytes, and must conform to the following PCRE
-            # regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`
-            #
-            # No more than 64 labels can be assigned to a given resource.
-          &quot;a_key&quot;: &quot;A String&quot;,
-        },
-      },
     ],
     &quot;nextPageToken&quot;: &quot;A String&quot;, # A token to retrieve the next page of results. Pass this value in
         # ListSecretsRequest.page_token to retrieve the next page.
@@ -753,63 +753,17 @@
     The object takes the form of:
 
 { # A Secret is a logical secret whose value and versions can
-    # be accessed.
-    # 
-    # A Secret is made up of zero or more SecretVersions that
-    # represent the secret data.
-  &quot;name&quot;: &quot;A String&quot;, # Output only. The resource name of the Secret in the format `projects/*/secrets/*`.
-  &quot;replication&quot;: { # A policy that defines the replication configuration of data. # Required. Immutable. The replication policy of the secret data attached to the Secret.
-      # 
-      # The replication policy cannot be changed after the Secret has been created.
-    &quot;userManaged&quot;: { # A replication policy that replicates the Secret payload into the # The Secret will only be replicated into the locations specified.
-        # locations specified in Secret.replication.user_managed.replicas
-      &quot;replicas&quot;: [ # Required. The list of Replicas for this Secret.
-          #
-          # Cannot be empty.
-        { # Represents a Replica for this Secret.
-          &quot;location&quot;: &quot;A String&quot;, # The canonical IDs of the location to replicate data.
-              # For example: `&quot;us-east1&quot;`.
-        },
-      ],
-    },
-    &quot;automatic&quot;: { # A replication policy that replicates the Secret payload without any # The Secret will automatically be replicated without any restrictions.
-        # restrictions.
-    },
-  },
-  &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time at which the Secret was created.
-  &quot;labels&quot;: { # The labels assigned to this Secret.
-      # 
-      # Label keys must be between 1 and 63 characters long, have a UTF-8 encoding
-      # of maximum 128 bytes, and must conform to the following PCRE regular
-      # expression: `\p{Ll}\p{Lo}{0,62}`
-      # 
-      # Label values must be between 0 and 63 characters long, have a UTF-8
-      # encoding of maximum 128 bytes, and must conform to the following PCRE
-      # regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`
-      # 
-      # No more than 64 labels can be assigned to a given resource.
-    &quot;a_key&quot;: &quot;A String&quot;,
-  },
-}
-
-  updateMask: string, Required. Specifies the fields to be updated.
-  x__xgafv: string, V1 error format.
-    Allowed values
-      1 - v1 error format
-      2 - v2 error format
-
-Returns:
-  An object of the form:
-
-    { # A Secret is a logical secret whose value and versions can
       # be accessed.
-      #
+      # 
       # A Secret is made up of zero or more SecretVersions that
       # represent the secret data.
     &quot;name&quot;: &quot;A String&quot;, # Output only. The resource name of the Secret in the format `projects/*/secrets/*`.
     &quot;replication&quot;: { # A policy that defines the replication configuration of data. # Required. Immutable. The replication policy of the secret data attached to the Secret.
-        #
+        # 
         # The replication policy cannot be changed after the Secret has been created.
+      &quot;automatic&quot;: { # A replication policy that replicates the Secret payload without any # The Secret will automatically be replicated without any restrictions.
+          # restrictions.
+      },
       &quot;userManaged&quot;: { # A replication policy that replicates the Secret payload into the # The Secret will only be replicated into the locations specified.
           # locations specified in Secret.replication.user_managed.replicas
         &quot;replicas&quot;: [ # Required. The list of Replicas for this Secret.
@@ -821,25 +775,71 @@
           },
         ],
       },
-      &quot;automatic&quot;: { # A replication policy that replicates the Secret payload without any # The Secret will automatically be replicated without any restrictions.
-          # restrictions.
-      },
     },
     &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time at which the Secret was created.
     &quot;labels&quot;: { # The labels assigned to this Secret.
-        #
+        # 
         # Label keys must be between 1 and 63 characters long, have a UTF-8 encoding
         # of maximum 128 bytes, and must conform to the following PCRE regular
         # expression: `\p{Ll}\p{Lo}{0,62}`
-        #
+        # 
         # Label values must be between 0 and 63 characters long, have a UTF-8
         # encoding of maximum 128 bytes, and must conform to the following PCRE
         # regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`
-        #
+        # 
         # No more than 64 labels can be assigned to a given resource.
       &quot;a_key&quot;: &quot;A String&quot;,
     },
-  }</pre>
+  }
+
+  updateMask: string, Required. Specifies the fields to be updated.
+  x__xgafv: string, V1 error format.
+    Allowed values
+      1 - v1 error format
+      2 - v2 error format
+
+Returns:
+  An object of the form:
+
+    { # A Secret is a logical secret whose value and versions can
+        # be accessed.
+        #
+        # A Secret is made up of zero or more SecretVersions that
+        # represent the secret data.
+      &quot;name&quot;: &quot;A String&quot;, # Output only. The resource name of the Secret in the format `projects/*/secrets/*`.
+      &quot;replication&quot;: { # A policy that defines the replication configuration of data. # Required. Immutable. The replication policy of the secret data attached to the Secret.
+          #
+          # The replication policy cannot be changed after the Secret has been created.
+        &quot;automatic&quot;: { # A replication policy that replicates the Secret payload without any # The Secret will automatically be replicated without any restrictions.
+            # restrictions.
+        },
+        &quot;userManaged&quot;: { # A replication policy that replicates the Secret payload into the # The Secret will only be replicated into the locations specified.
+            # locations specified in Secret.replication.user_managed.replicas
+          &quot;replicas&quot;: [ # Required. The list of Replicas for this Secret.
+              #
+              # Cannot be empty.
+            { # Represents a Replica for this Secret.
+              &quot;location&quot;: &quot;A String&quot;, # The canonical IDs of the location to replicate data.
+                  # For example: `&quot;us-east1&quot;`.
+            },
+          ],
+        },
+      },
+      &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time at which the Secret was created.
+      &quot;labels&quot;: { # The labels assigned to this Secret.
+          #
+          # Label keys must be between 1 and 63 characters long, have a UTF-8 encoding
+          # of maximum 128 bytes, and must conform to the following PCRE regular
+          # expression: `\p{Ll}\p{Lo}{0,62}`
+          #
+          # Label values must be between 0 and 63 characters long, have a UTF-8
+          # encoding of maximum 128 bytes, and must conform to the following PCRE
+          # regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`
+          #
+          # No more than 64 labels can be assigned to a given resource.
+        &quot;a_key&quot;: &quot;A String&quot;,
+      },
+    }</pre>
 </div>
 
 <div class="method">
@@ -927,18 +927,6 @@
         #
         # For a description of IAM and its features, see the
         # [IAM documentation](https://cloud.google.com/iam/docs/).
-      &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
-          # prevent simultaneous updates of a policy from overwriting each other.
-          # It is strongly suggested that systems make use of the `etag` in the
-          # read-modify-write cycle to perform policy updates in order to avoid race
-          # conditions: An `etag` is returned in the response to `getIamPolicy`, and
-          # systems are expected to put that etag in the request to `setIamPolicy` to
-          # ensure that their change will be applied to the same version of the policy.
-          #
-          # **Important:** If you use IAM Conditions, you must include the `etag` field
-          # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
-          # you to overwrite a version `3` policy with a version `1` policy, and all of
-          # the conditions in the version `3` policy are lost.
       &quot;version&quot;: 42, # Specifies the format of the policy.
           #
           # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
@@ -1094,6 +1082,8 @@
               # The exact variables and functions that may be referenced within an expression
               # are determined by the service that evaluates it. See the service
               # documentation for additional information.
+            &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
+                # syntax.
             &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
                 # its purpose. This can be used e.g. in UIs which allow to enter the
                 # expression.
@@ -1101,8 +1091,6 @@
                 # reporting, e.g. a file name and a position in the file.
             &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
                 # describes the expression, e.g. when hovered over it in a UI.
-            &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
-                # syntax.
           },
           &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
               # `members` can have the following values:
@@ -1153,6 +1141,18 @@
               # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
         },
       ],
+      &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
+          # prevent simultaneous updates of a policy from overwriting each other.
+          # It is strongly suggested that systems make use of the `etag` in the
+          # read-modify-write cycle to perform policy updates in order to avoid race
+          # conditions: An `etag` is returned in the response to `getIamPolicy`, and
+          # systems are expected to put that etag in the request to `setIamPolicy` to
+          # ensure that their change will be applied to the same version of the policy.
+          #
+          # **Important:** If you use IAM Conditions, you must include the `etag` field
+          # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
+          # you to overwrite a version `3` policy with a version `1` policy, and all of
+          # the conditions in the version `3` policy are lost.
     },
     &quot;updateMask&quot;: &quot;A String&quot;, # OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
         # the fields in the mask will be modified. If no mask is provided, the
@@ -1236,18 +1236,6 @@
       #
       # For a description of IAM and its features, see the
       # [IAM documentation](https://cloud.google.com/iam/docs/).
-    &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
-        # prevent simultaneous updates of a policy from overwriting each other.
-        # It is strongly suggested that systems make use of the `etag` in the
-        # read-modify-write cycle to perform policy updates in order to avoid race
-        # conditions: An `etag` is returned in the response to `getIamPolicy`, and
-        # systems are expected to put that etag in the request to `setIamPolicy` to
-        # ensure that their change will be applied to the same version of the policy.
-        #
-        # **Important:** If you use IAM Conditions, you must include the `etag` field
-        # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
-        # you to overwrite a version `3` policy with a version `1` policy, and all of
-        # the conditions in the version `3` policy are lost.
     &quot;version&quot;: 42, # Specifies the format of the policy.
         #
         # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
@@ -1403,6 +1391,8 @@
             # The exact variables and functions that may be referenced within an expression
             # are determined by the service that evaluates it. See the service
             # documentation for additional information.
+          &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
+              # syntax.
           &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
               # its purpose. This can be used e.g. in UIs which allow to enter the
               # expression.
@@ -1410,8 +1400,6 @@
               # reporting, e.g. a file name and a position in the file.
           &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
               # describes the expression, e.g. when hovered over it in a UI.
-          &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
-              # syntax.
         },
         &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
             # `members` can have the following values:
@@ -1462,6 +1450,18 @@
             # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
       },
     ],
+    &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
+        # prevent simultaneous updates of a policy from overwriting each other.
+        # It is strongly suggested that systems make use of the `etag` in the
+        # read-modify-write cycle to perform policy updates in order to avoid race
+        # conditions: An `etag` is returned in the response to `getIamPolicy`, and
+        # systems are expected to put that etag in the request to `setIamPolicy` to
+        # ensure that their change will be applied to the same version of the policy.
+        #
+        # **Important:** If you use IAM Conditions, you must include the `etag` field
+        # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
+        # you to overwrite a version `3` policy with a version `1` policy, and all of
+        # the conditions in the version `3` policy are lost.
   }</pre>
 </div>